Festo Controller CECC-X-M1-MV-S1
Approved changes feed: RSS · Atom
cpe:2.3:h:festo:controller_cecc-x-m1-mv-s1:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Festo (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90) |
|---|---|
| Product | Controller Cecc X M1 Mv S1 (95631943-6fe7-5752-952e-1590fa0b7b09) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-3270 |
not_vulnerable | 2026-06-08 05:47:20.050781 |
Incomplete Documentation of remote functions in FESTO products.
CRITICAL (9.8)
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
Published: 2022-12-01T10:27:52.434Z
Updated: 2025-04-24T20:05:32.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30311 |
not_vulnerable | 2026-06-08 05:43:37.914637 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:24.763Z
Updated: 2024-09-16T23:41:46.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30310 |
not_vulnerable | 2026-06-08 05:43:37.909762 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:23.105Z
Updated: 2024-11-20T15:21:04.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30309 |
not_vulnerable | 2026-06-08 05:43:37.907244 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:21.634Z
Updated: 2024-09-16T22:15:41.158Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30308 |
not_vulnerable | 2026-06-08 05:43:37.899776 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:20.015Z
Updated: 2024-09-16T22:40:02.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.